What's the best incantation to block js files only when they occur within an archive file?
...are two hierarchy's that are pretty common in phishing mails right now. It used to be confined to actual email attachments, but now we're seeing the trend move to links in emails.
I don't believe I have any rules like this, and of course, blocking .js outright would make the web pretty darned uninteresting.
TIA for any experience on this!
Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center